Privacy Policy

This Privacy Policy explains what data we collect, why we collect it, and what we do (and don't do) with it. No legal acrobatics — just straight talk.

username.dev is a developer-friendly API for username validation and governance. You send us username strings, we tell you if they're clean, reserved, offensive, premium, or otherwise sensitive.

We only collect what we actually need to run the service: Account data

• First name
• Last name
• Email
• Anything your OAuth provider shares (Google, GitHub, GitLab — usually your name and email)

Product usage data

• API logs (including the raw username you sent to our /check endpoint)
• Request metadata (timestamps, IPs, etc.)

Billing data

• When you buy request packs, Stripe handles your payment details — we don't store card numbers.

If you sign up with Google, GitHub, or GitLab, they send us basic identity info. We don't get access to your private repos, code, or anything wild. We may add more OAuth in the future — same rules apply.

We use:

• Google Analytics for website usage
• Vercel Analytics for performance insights

This helps us understand traffic and product usage — not to stalk you.

We use a few external services to keep things running smoothly:

• Cloudflare (global edge network, Workers)
• Vercel (app hosting & CI/CD)
• GitHub (code + OAuth)
• Stripe (payments)
• Brevo (email sending)

They may process technical or billing data as part of normal operations. They don't get to sell your data.

We use your data to:

• create and secure your account
• keep the service online
• measure usage
• send receipts and important emails
• prevent abuse

We do not:

• sell your data
• run ads
• train ML models on your data
• hand anything to third parties without a legal reason

Our logs store the exact username you passed into the API. Why?

• debugging
• accuracy improvements
• safety and abuse monitoring

If you're sending something sensitive, think twice — usernames are usually public by nature, but you decide what goes in.

Right now, we don't share user data with outside third parties (other than the infra providers listed above). If that ever changes, we'll update this page.

You may occasionally get product announcements, billing notices, or support communications. Unsubscribe anytime — or just reply and tell us to stop.

We use modern security practices, encryption where appropriate, and industry-standard auth. That said — no system is perfect.

This service is not for kids. If you're under 16, please don't use it.

You can delete your account directly from inside the dashboard — no human required. When you do, we wipe personal account data unless we're legally required to retain billing or transaction records. If you hit any issues, email sourabh@username.dev and we'll help.

We may update this Policy as the product evolves. When we do, we'll update the "Last updated" date.

Reach out: sourabh@username.dev